This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.mft
File:                     65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.mft (raw, json)
Hash identifier:          CDavB5JIfhRJU1Z69GDwWF/HPeQ9hDiEvrvhETxuxdY=
Subject key identifier:   60:49:32:EB:80:74:59:39:E0:40:45:EE:8D:3F:E2:63:17:41:F8:3D
Authority key identifier: 65:AC:7E:7F:A3:98:76:E7:BE:D5:EC:14:ED:19:5E:3E:9C:BB:70:97
Certificate issuer:       /CN=65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097
Certificate serial:       40CC9BB6514AF7D0E2C3DE0F7518BC740A157294
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.cer
Subject info access:      rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.mft
Manifest number:          1D
Signing time:             Sat 17 Jan 2026 09:22:53 +0000
Manifest this update:     Sat 17 Jan 2026 09:17:53 +0000
Manifest next update:     Sun 18 Jan 2026 12:47:53 +0000
Files and hashes:         1: 326130663a316363353a6630303a3a2f34302d3438203d3e20323130333532.roa (hash: BVWpAt8ZIeLv3s6mIqdwZBbEyrqDjG9Ei61FZc5gyMQ=)
                          2: 326130663a316363353a6666663a3a2f34382d3438203d3e20323131353735.roa (hash: 8SUYpJXFSl2DDStwEGb1ZAliYSW0qeK38BnzRin2H38=)
                          3: 65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.crl (hash: 1p4dqiu8Ft5oF9Vy1cIxnfSvaTiz9nLuBvryhg6/uNg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:cc:9b:b6:51:4a:f7:d0:e2:c3:de:0f:75:18:bc:74:0a:15:72:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097
        Validity
            Not Before: Jan 17 09:17:53 2026 GMT
            Not After : Jan 18 12:47:53 2026 GMT
        Subject: CN=604932EB80745939E04045EE8D3FE2631741F83D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:29:d9:0e:17:16:6a:ce:75:15:b8:16:b5:f0:
                    59:68:7b:3d:57:59:92:36:0f:08:00:46:68:06:2e:
                    0a:f5:5b:d2:d3:b7:0e:d6:2e:cc:36:2b:31:b8:71:
                    c7:05:78:27:9e:9a:b1:65:d1:2c:d2:13:de:4c:29:
                    67:51:a7:90:d4:bd:41:ea:f7:3c:e5:e3:24:99:c2:
                    3e:14:e7:b0:d2:75:eb:70:1e:21:00:9b:aa:7b:75:
                    1c:c8:ab:d4:56:81:8e:75:b9:ae:13:ac:47:fa:5f:
                    16:b4:3c:d8:b7:d7:49:5b:e7:92:89:6e:3f:77:d4:
                    d7:1e:39:0d:e1:22:4a:d8:15:0c:a8:3e:80:eb:81:
                    fb:ec:2f:1e:bc:80:ed:7c:ac:9c:0b:36:37:22:db:
                    76:73:20:88:fb:9d:b0:21:95:f4:1d:bc:74:17:8f:
                    18:22:08:08:17:c6:f3:73:35:dc:62:e9:7f:6b:e3:
                    84:a2:c5:74:a0:cd:e8:52:b2:75:32:2d:1c:30:60:
                    12:0c:28:35:ea:6a:4d:20:b5:f7:e7:3b:a6:16:f4:
                    1a:22:da:19:a4:3c:08:e0:9c:1b:03:e3:40:1a:11:
                    2a:87:80:7d:0e:37:27:eb:56:45:dc:83:2a:03:40:
                    2a:80:30:c2:a6:7c:51:a2:59:d8:ab:4f:1a:22:af:
                    0f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:49:32:EB:80:74:59:39:E0:40:45:EE:8D:3F:E2:63:17:41:F8:3D
            X509v3 Authority Key Identifier:
                keyid:65:AC:7E:7F:A3:98:76:E7:BE:D5:EC:14:ED:19:5E:3E:9C:BB:70:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e26eb136-4fe5-4e61-a4d8-f345f52bc25d/0/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1517b5d0-3317-4b49-8ec5-be90bc70062f/2/65AC7E7FA39876E7BED5EC14ED195E3E9CBB7097.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:27:88:57:77:f6:01:56:b4:be:f2:aa:20:66:15:0c:59:f1:
         54:e2:ef:89:c6:3c:2c:29:78:bd:0c:4c:76:55:f6:ea:77:70:
         1f:57:7b:19:b9:1b:51:9f:12:69:14:ea:16:89:57:73:59:ce:
         cc:32:55:c3:20:f0:b1:87:06:48:b0:10:0b:70:57:92:82:a6:
         15:04:6f:3b:56:e6:14:65:06:ca:97:9b:a9:81:30:a9:2b:2a:
         db:04:d2:5b:82:8c:03:06:d3:92:06:06:88:ae:e4:52:5e:85:
         03:62:4b:48:91:46:c6:dd:d8:ae:bf:f4:0c:79:cf:67:27:d7:
         85:88:a4:7e:c3:e8:e6:94:dd:5f:9a:48:70:c9:b5:52:f2:be:
         43:50:e0:56:09:27:3a:65:87:26:35:6b:c1:cb:b4:2e:86:4d:
         f5:1c:43:0a:43:e3:36:2c:6c:0c:de:41:bc:35:6d:e6:56:44:
         ed:80:d0:ca:b4:3b:46:0c:10:76:0d:ee:55:cf:94:cf:b7:bd:
         a8:7e:ef:4d:70:24:3f:f0:50:84:fc:82:42:18:1c:23:ae:01:
         92:f6:98:16:68:5b:6a:80:d8:d4:ce:a8:17:fa:4a:19:d0:b9:
         48:83:86:24:a9:13:07:bf:42:ee:42:7b:ef:44:3f:7f:b0:66:
         89:e0:5b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----